Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C8DD5/D5A1A1C612A711E7ADB4DE4DC4F9AE02/1sP4E3joVAB4unmUQu7b7HgOD3s.mft
File: 1sP4E3joVAB4unmUQu7b7HgOD3s.mft (raw, json)
Hash identifier: VIDfkCtYEvZlZweTQE/htNFZDC8RBE08il6yRAcOW3U=
Subject key identifier: 33:88:23:55:9F:D1:C8:58:12:F2:01:38:72:44:B1:4A:95:F5:6A:F4
Authority key identifier: D6:C3:F8:13:78:E8:54:00:78:BA:79:94:42:EE:DB:EC:78:0E:0F:7B
Certificate issuer: /CN=A91C8DD5/serialNumber=D6C3F81378E8540078BA799442EEDBEC780E0F7B
Certificate serial: 1B0E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1sP4E3joVAB4unmUQu7b7HgOD3s.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C8DD5/D5A1A1C612A711E7ADB4DE4DC4F9AE02/1sP4E3joVAB4unmUQu7b7HgOD3s.mft
Manifest number: 1B05
Signing time: Fri 31 Jan 2025 16:18:41 +0000
Manifest this update: Fri 31 Jan 2025 16:18:41 +0000
Manifest next update: Fri 07 Feb 2025 16:18:41 +0000
Files and hashes: 1: 1sP4E3joVAB4unmUQu7b7HgOD3s.crl (hash: cwODAQqfIhrzkfVdawWHEEdgz/x7m7bxuJSjs+I4N+A=)
2: 020A31F812B011E7A7C42661C4F9AE02.roa (hash: N/QKwYU99zSxNpR5M+QspbIb1HfEPDfTD2V5TEy4RLU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6926 (0x1b0e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C8DD5/serialNumber=D6C3F81378E8540078BA799442EEDBEC780E0F7B
Validity
Not Before: Jan 31 16:18:41 2025 GMT
Not After : Feb 7 16:18:41 2025 GMT
Subject: CN=679cf7e1-67a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:0b:7d:96:11:5c:ce:01:5b:eb:45:44:82:93:
b0:24:5f:2f:f0:8d:06:d0:ba:c8:82:ec:ac:70:d1:
2a:1e:ab:4e:0c:cc:32:16:41:58:4d:7f:a4:51:0f:
60:5a:08:39:bd:a8:b4:0f:2a:d4:8e:7f:44:10:c3:
0d:ff:52:11:2d:73:e7:80:0c:ac:1a:c4:5d:b6:6d:
55:9f:b4:78:92:2f:d3:75:58:01:8e:1e:f6:66:92:
ae:77:a8:2f:80:5a:3f:8d:23:fe:76:f0:0f:8a:a0:
0c:82:57:da:5d:13:47:2e:bb:8f:53:90:07:2a:be:
c3:cc:09:b3:04:16:4d:ef:3a:ec:aa:62:0c:43:a8:
2d:32:19:a1:34:a9:48:57:f4:cb:31:ea:9d:1c:28:
cf:3d:99:74:38:25:ff:e7:ac:86:ea:ec:9b:16:a7:
e4:d5:21:a8:3a:c3:ac:0f:37:31:f6:b6:aa:ea:f2:
f2:ef:94:35:c2:e1:72:a9:e8:ab:8a:ec:65:21:a8:
38:dd:31:1a:22:d6:72:c1:3f:a7:b2:55:ec:25:be:
bc:05:8a:25:55:4b:6a:d0:2c:5e:3d:83:4d:63:b1:
38:87:f2:be:1b:54:0c:ad:1e:9b:0c:44:e2:a8:b8:
fb:48:a6:97:fa:e2:00:ed:0a:2c:52:3a:ee:bd:d5:
c9:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:88:23:55:9F:D1:C8:58:12:F2:01:38:72:44:B1:4A:95:F5:6A:F4
X509v3 Authority Key Identifier:
keyid:D6:C3:F8:13:78:E8:54:00:78:BA:79:94:42:EE:DB:EC:78:0E:0F:7B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C8DD5/D5A1A1C612A711E7ADB4DE4DC4F9AE02/1sP4E3joVAB4unmUQu7b7HgOD3s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1sP4E3joVAB4unmUQu7b7HgOD3s.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C8DD5/D5A1A1C612A711E7ADB4DE4DC4F9AE02/1sP4E3joVAB4unmUQu7b7HgOD3s.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
08:14:87:3a:5d:2e:d3:de:e7:c6:ef:26:fd:79:f6:a4:29:f5:
32:9d:18:c7:7a:af:07:b9:08:2e:6f:b9:8a:8c:9d:a8:da:0f:
62:ac:d3:4e:10:71:95:2e:26:c5:7a:cd:80:8e:66:b6:38:6b:
24:b6:a4:79:37:43:13:0b:57:54:1f:eb:31:0a:a8:e5:a8:16:
06:db:94:58:d5:bd:60:ac:5f:a0:c9:9d:ff:58:cc:da:c4:ac:
ea:c7:46:32:6a:ee:3f:5e:58:2e:29:51:51:03:37:d9:56:07:
89:69:dc:8f:9f:94:0a:71:1f:44:62:66:26:99:ac:db:ef:37:
5e:73:ac:5c:a5:80:9c:99:cf:16:9a:a2:f2:76:3c:cc:b0:67:
f9:69:15:ba:32:e5:f3:19:c9:96:d9:61:d3:a3:89:0b:2c:70:
08:73:f5:5f:7c:61:39:e8:b9:5c:bc:a7:30:ab:52:59:81:ad:
a0:ff:45:db:04:c7:bb:d9:b6:8a:4d:d4:05:40:5d:ed:33:f0:
0a:f4:5d:da:82:1f:f9:fe:70:3f:a0:64:8c:02:b0:44:6e:e2:
53:a0:f4:1a:83:2c:41:b8:4e:8f:29:67:18:bd:b5:fa:76:30:
6f:dd:3d:ff:06:3f:a4:ce:33:40:e1:07:19:b7:d1:85:0c:7d:
95:1d:f4:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 03:04:05 2025 by rpki-client